This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json) Hash identifier: x5pJJv3nAxeErm22yDgLz3lUWP9J17Bqq5xnsibeKDk= Subject key identifier: F9:97:75:6B:AD:81:6F:2A:39:25:0F:54:77:56:F1:8A:A2:D4:94:16 Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a Certificate serial: 019B14CB9390B336523F7CA55B5D18F41045 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft Manifest number: 0E82 Signing time: Fri 12 Dec 2025 23:00:44 +0000 Manifest this update: Fri 12 Dec 2025 23:00:44 +0000 Manifest next update: Sat 13 Dec 2025 23:00:44 +0000 Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=) 2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=) 3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=) 4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: Vt7/naLoPq7kTlS71kZVgwFA5sndKZkT2jGG9pgiPOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:cb:93:90:b3:36:52:3f:7c:a5:5b:5d:18:f4:10:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a Validity Not Before: Dec 12 23:00:44 2025 GMT Not After : Dec 13 23:00:44 2025 GMT Subject: CN=f997756bad816f2a39250f547756f18aa2d49416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:85:f2:2f:06:d5:9d:be:3f:94:54:0d:d6: cf:91:ca:a5:c1:05:d5:90:bc:28:65:d7:a7:8f:3f: 4a:15:69:ca:c5:21:56:ef:af:31:fd:a7:6f:70:64: 7a:5a:bd:53:3a:82:6b:ef:15:b2:be:62:8d:c5:66: ba:a5:14:30:12:de:8f:a4:e6:25:8e:25:e2:3e:11: b3:9c:fb:3f:3c:0d:e7:e1:52:77:8e:5c:0f:33:14: 1c:b9:ca:37:b8:cc:c6:82:9b:bb:e5:c8:95:90:6a: d2:dc:92:c2:99:88:b4:e0:aa:3c:05:40:d8:76:1f: de:3f:60:ef:48:f3:cf:36:23:4e:bd:fc:a6:13:0d: fb:2e:a0:dc:02:35:0f:d1:ef:9c:ec:75:8f:6e:ad: 55:62:36:fe:70:9e:b9:0d:cb:6e:29:54:a1:5b:7c: 8a:e4:da:f2:0f:d1:c7:43:fd:1e:f4:f1:87:71:b2: 85:57:83:fe:b2:e8:a3:48:91:89:44:44:28:55:5b: a4:ad:c2:56:11:8d:61:66:76:ed:18:65:81:04:4e: d7:ac:33:fc:30:d6:f0:f2:24:6b:1c:07:6e:fc:46: 28:de:4c:b0:c5:01:c9:0c:56:4e:b7:5c:b8:de:e2: 91:09:48:b2:bc:31:ea:76:7a:4c:78:98:b3:c7:7d: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:97:75:6B:AD:81:6F:2A:39:25:0F:54:77:56:F1:8A:A2:D4:94:16 X509v3 Authority Key Identifier: keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:6b:05:10:8d:76:1c:c3:ef:83:45:41:2e:0f:97:46:5c:d5: 50:95:ad:01:79:55:e1:d6:74:f6:8b:db:e9:29:dc:e0:e5:66: 17:3e:9b:54:50:13:fa:14:72:c9:e3:94:2a:45:3d:87:cd:be: 1d:2d:38:be:56:13:e3:55:d6:66:a1:4b:69:84:a7:7e:b7:59: 5c:2d:73:ca:e0:fa:4e:f8:2a:75:d5:bc:8d:d6:50:f6:0e:9b: a1:35:05:6e:27:a3:09:3d:44:89:fc:64:3c:23:86:5b:28:c7: 4b:35:b9:9a:16:4e:a7:b5:f7:d4:10:26:71:9c:f0:31:e7:48: b8:b2:ba:ca:29:be:5a:a0:4a:7a:70:77:4d:17:1e:91:bd:75: 59:c8:1d:85:62:28:93:c0:ed:15:ee:07:af:38:a1:7f:52:e0: c5:e5:99:d9:e7:a1:81:48:aa:e4:9d:96:17:f3:66:6b:82:24: 07:3f:04:45:56:3d:13:b9:b8:00:9d:f6:e9:ad:5e:00:b5:32: 02:d3:85:e7:3b:cd:5c:b2:46:ea:aa:ff:3e:0b:7d:bd:e1:f8: b1:cc:1f:3f:9f:d5:9f:b3:f7:7a:d8:ed:a3:b7:d1:cb:47:5b: a1:80:ba:03:0e:68:6a:ae:3b:a8:8e:c8:e0:d1:e5:3a:60:d5: 4b:af:d9:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUy5OQszZSP3ylW10Y9BBFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGFlNzY3OGEzOTY5NjllNjM0MGM5ZGNiNjVjZGU5ZTMy OTU1NGEwHhcNMjUxMjEyMjMwMDQ0WhcNMjUxMjEzMjMwMDQ0WjAzMTEwLwYDVQQD EyhmOTk3NzU2YmFkODE2ZjJhMzkyNTBmNTQ3NzU2ZjE4YWEyZDQ5NDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQeF8i8G1Z2+P5RUDdbPkcqlwQXV kLwoZdenjz9KFWnKxSFW768x/advcGR6Wr1TOoJr7xWyvmKNxWa6pRQwEt6PpOYl jiXiPhGznPs/PA3n4VJ3jlwPMxQcuco3uMzGgpu75ciVkGrS3JLCmYi04Ko8BUDY dh/eP2DvSPPPNiNOvfymEw37LqDcAjUP0e+c7HWPbq1VYjb+cJ65DctuKVShW3yK 5NryD9HHQ/0e9PGHcbKFV4P+suijSJGJREQoVVukrcJWEY1hZnbtGGWBBE7XrDP8 MNbw8iRrHAdu/EYo3kywxQHJDFZOt1y43uKRCUiyvDHqdnpMeJizx316yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmXdWutgW8qOSUPVHdW8Yqi1JQWMB8GA1UdIwQY MBaAFKDa52eKOWlp5jQMnctlzenjKVVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDct ZjczNWUzZGFmZDUzLzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDctZjczNWUzZGFmZDUz LzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2sFEI12 HMPvg0VBLg+XRlzVUJWtAXlV4dZ09ovb6Snc4OVmFz6bVFAT+hRyyeOUKkU9h82+ HS04vlYT41XWZqFLaYSnfrdZXC1zyuD6TvgqddW8jdZQ9g6boTUFbiejCT1Eifxk PCOGWyjHSzW5mhZOp7X31BAmcZzwMedIuLK6yim+WqBKenB3TRcekb11WcgdhWIo k8DtFe4Hrzihf1LgxeWZ2eehgUiq5J2WF/Nma4IkBz8ERVY9E7m4AJ326a1eALUy AtOF5zvNXLJG6qr/Pgt9veH4scwfP5/Vn7P3etjto7fRy0dboYC6Aw5oaq47qI7I 4NHlOmDVS6/Zag== -----END CERTIFICATE-----Generated at Sat Dec 13 01:54:38 2025 by rpki-client